Project

General

Profile

mod_auth and disable access for some minutes after failed login attempt

Added by skil over 14 years ago

Hello.
I'm using mod_auth and digest authorization.

Is there a way to disable access after some failed login attempts?
I.e. after the 5th attempt the client will be redirected to the 404 Not Found page & will receive it after each new request during one minute.

May this be done using Lua facilities?

P.S.: lighttpd 1.4.23, debian linux


Replies (1)

RE: mod_auth and disable access for some minutes after failed login attempt - Added by nitrox over 14 years ago

you really want to log one minute of traffic? some hosts have hundreds of cons per second, good luck then.

i think lighty shouldn´t solve every small "problem", there´s enough important stuff left and we should concentrate on that.

    (1-1/1)